Jack Taylor

Jack Taylor is a security researcher credited with 28 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #216 of 3,878 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2024, with 11 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 16 of their findings (57%). Other recurring categories include SQL Injection, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 9 high.

The most affected software includes Simple Shopping Cart (5), Custom Field Suite (4), Download Manager (4), across 14 distinct plugins, themes and core versions in total.

23 of the 28 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution", scores 8.8 out of 10.

202420252026
Critical
High
Medium
Low
Global Rank

#216

of 3,878 researchers

Vulns

28

Critical0
High9
Medium19
Low0
Affected Assets

15

15plugins
Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

28 records
2026-09-30 16:46CVE-2026-85679
7.2
High
Jack TaylorYes
2026-08-27 15:19CVE-2026-18978
7.2
High
Jack TaylorYes
2026-08-24 22:05CVE-2026-19949
8.8
High
Jack TaylorYes
2026-06-18 16:21CVE-2026-8118
6.5
Medium
Jack TaylorYes
2026-02-18 00:00CVE-2025-13738
6.4
Medium
Jack TaylorYes
2026-02-17 17:51CVE-2026-1666
6.1
Medium
Jack TaylorYes
2026-01-05 16:06CVE-2025-14438
6.4
Medium
Jack TaylorYes
2025-06-10 00:00CVE-2025-3302
7.2
High
Jack TaylorYes
2025-05-30 14:49CVE-2025-5016
4.7
Medium
Jack TaylorYes
2025-05-12 14:38CVE-2025-4396
7.5
High
Jack TaylorYes
Showing 1–10 of 28 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C